RepoMirrors/osquery-defense-kit
1
0
Fork 0
mirror of https://github.com/chainguard-dev/osquery-defense-kit synced 2025-01-10 07:39:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

execdir: Add ~/go and ~/bin exceptions

Browse Source
This commit is contained in:
Thomas Stromberg 2022-11-10 12:55:09 -05:00
parent f7237c3641
commit 4a9a967b47
Failed to extract signature
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
detection/execution/unexpected-execdir-events-macos.sql
View File

@ -111,8 +111,10 @@ WHERE
)
AND top_homedir NOT IN (
'~/Applications/',
'~/bin/',
'~/code/',
'~/.config/',
'~/go/',
'~/homebrew/',
'~/Library/',
'~/.local/',

8
detection/execution/unexpected-execdir-macos.sql
View File

@ -102,18 +102,20 @@ WHERE
)
AND top_homedir NOT IN (
'~/Applications/',
'~/bin/',
'~/code/',
'~/.config/',
'~/git/',
'~/go/',
'~/google-cloud-sdk/',
'~/homebrew/',
'~/Library/',
'~/.local/',
'~/projects/',
'~/git/',
'~/.pulumi/',
'~/src/',
'~/.tflint.d/',
'~/.vscode/',
'~/google-cloud-sdk/',
'~/.pulumi/',
'~/.vs-kubernetes/'
)
-- Locally built executables